Advertising & MarketingManaged AI Agents

Advertising & Marketing AI Agents,
Monitored for Brand Safety

Nestack Agent Care helps marketing teams monitor, evaluate, and optimize AI agents used for campaign automation, content generation, audience targeting, and performance reporting — before small AI errors become brand, budget, or compliance problems.

186failure modes
77SEV-1 failure modes
2850+baseline eval cases
24/7Agent Monitoring

Scope

Advertising & Marketing AI agents we build & manage

Twenty archetypes — from copy generation to publisher yield, marketing-mix modelling and agentic commerce.

Observability

What we make observable

Every advertising agent session is traced across ten layers — what we capture and the evidence we keep.

  1. Evidence we keep
    Goalconstraintsapproval requirement
  2. Evidence we keep
    Sourceversiontimestamprelevancecitation
  3. Evidence we keep
    Planned sequenceactual sequenceworkflow status
  4. Evidence we keep
    Task statusresultretryfailure reason
  5. Evidence we keep
    Tool nameversioninputoutputpermissionresult
  6. Evidence we keep
    Model/versioninput/outputtoken usagelatencycost
  7. Evidence we keep
    Evaluation typemetricthresholdresult
  8. Evidence we keep
    Guardrail targettriggeractionenforcement result
  9. Evidence we keep
    Reviewerdecisioncorrectionreason
  10. Evidence we keep
    Outcome statusbusiness resultlinked trace

Catalog

Failure modes

Filter failure modes by where they occur in the agent lifecycle—from goals and retrieval to tools, evaluations, guardrails and outcomes.

Nothing on this page matches that. Try a layer (tool, retrieval, guardrail), a code, or a severity.

0 documented↑↓ move · ↵ open · ⌘↵ filter matrix
186 documented · select a cell to filter
43
62
33
43
45
40
78
55
14
144
ADV-01False or unsubstantiated claims in generated copySEV-1
ADV-02Discriminatory targeting in restricted categories (housing, jobs, credit)SEV-1
ADV-03Competitor defamation or unlawful comparative claimsSEV-1
ADV-04Budget-spend errors — runaway or misallocated campaignsSEV-2
ADV-05Brand-safety placement failuresSEV-2
ADV-06Metric hallucination in performance reportsSEV-2
ADV-07Cross-account leakage between competing clientsSEV-1
ADV-08IP / trademark misuse in generated creativeSEV-2
ADV-09Missing material-connection disclosures — undisclosed #ad or paid endorsementSEV-2
ADV-10Restricted-category and platform-policy ad violations — alcohol, gambling, crypto, pharmaSEV-2
ADV-11Synthetic-likeness and voice misuse — real person generated without rightsSEV-1
ADV-12Audience-list and consent violations — non-consented PII uploaded to ad platformsSEV-1
ADV-13Deceptive urgency and dark-pattern copy — fake scarcity and pressureSEV-2
ADV-14Attribution and significance misreads in test resultsSEV-3
ADV-15Indirect prompt injection via ingested web, briefs and UGCSEV-1
ADV-16Data exfiltration via rendered markdown links and images — zero-clickSEV-1
ADV-17Brand knowledge-base / RAG poisoningSEV-1
ADV-18Tool-permission abuse and excessive agency — account takeover, mass-postingSEV-1
ADV-19MCP / plugin supply-chain compromiseSEV-2
ADV-20Credential leakage in agent-generated code and configsSEV-2
ADV-21Runaway token spend / denial-of-walletSEV-2
ADV-22Duplicate execution / idempotency failure — double-send, double-launchSEV-2
ADV-23Silent model-version regressionSEV-3
ADV-24Automation bias — rubber-stamped review of agent outputSEV-3
ADV-25Brand chatbot jailbreak — off-brand, offensive or binding outputSEV-1
ADV-26Binding-offer / misrepresentation liabilitySEV-1
ADV-27Hallucinated policies and terms in owned channelsSEV-2
ADV-28Undisclosed AI interaction — chatbot not disclosed as AISEV-2
ADV-29AI-voice and autodialed outreach without TCPA consentSEV-1
ADV-30Opt-out and suppression-list failureSEV-1
ADV-31Sensitive-category inference retargeting — health and sexualitySEV-1
ADV-32Child-directed targeting without parental consent (COPPA)SEV-1
ADV-33Tracking-pixel and server-side tagging PII leakageSEV-1
ADV-34AI-generated fake reviews and fabricated social proofSEV-1
ADV-35MFA and invalid-traffic budget siphoningSEV-2
ADV-36Optimization loop poisoned by fraudulent conversionsSEV-2
ADV-37Email deliverability and domain-reputation collapseSEV-2
ADV-38Scaled-content SEO penalty and AI-provenance backlashSEV-2
ADV-39Machine-translation and localization blowupsSEV-2
ADV-40Personalization misfire and insensitive life-event triggersSEV-2
ADV-41Crisis-blind scheduled postingSEV-2
ADV-42Accessibility failures in generated creativeSEV-2
ADV-43Frequency-cap failure — over-exposure harassmentSEV-3
ADV-44Product-feed error amplification and channel suspensionSEV-2
ADV-45Deepfake impersonation of brand or spokesperson in scam adsSEV-2
ADV-46AI answer-engine misinformation about the brandSEV-2

A · Campaign copy-generation agents

CG-01Retired claim still in use01 · Brief & claimsSEV-1
CG-02Unsupported superlative02 · DraftingSEV-1
CG-03Unauthorised implied claim02 · DraftingSEV-2
CG-04Comparison with no evidence03 · ConstraintsSEV-1
CG-05Disclosure lost to length03 · ConstraintsSEV-2
CG-06Localisation moves the claim04 · Locale & releaseSEV-2
CG-07Silent voice drift05 · Change / VersionSEV-3

B · Media-buying & budget assistants

MB-01Currency and time-zone error01 · Plan lookupSEV-3
MB-02Optimising to an artefact02 · Variance & shiftSEV-2
MB-03Committed-IO breach02 · Variance & shiftSEV-2
MB-04Spend on the wrong flight03 · Platform writeSEV-1
MB-05Duplicate line double-spend03 · Platform writeSEV-1
MB-06Unattended change runs on04 · Pacing watchSEV-1
MB-07Auto-feature overrides plan05 · Change / VersionSEV-2

C · Performance-reporting agents

PR-01Partial period read as final01 · Source pullSEV-2
PR-02Currency or time-zone drift01 · Source pullSEV-3
PR-03Double-counted conversions02 · ReconciliationSEV-2
PR-04Cause asserted without a test03 · CommentarySEV-1
PR-05Commentary tilted to the agency03 · CommentarySEV-1
PR-06Right in the warehouse, wrong in the deck04 · DeliverySEV-2
PR-07Definition moved under the trend05 · Change / VersionSEV-2

D · Audience-targeting copilots

AT-01Unpermissioned input01 · SourcingSEV-1
AT-02Sensitive category inferred01 · SourcingSEV-1
AT-03Proxy rebuilds a protected attribute02 · DefinitionSEV-1
AT-04Suppression not applied03 · ActivationSEV-2
AT-05Match rate not verified03 · ActivationSEV-2
AT-06Audience collapses at delivery04 · DeliverySEV-3
AT-07Lookalike drifts from seed05 · Change / VersionSEV-3

E · Client-services agents

CS-03Stale or unreconciled figure01 · RetrievalSEV-2
CS-04Cross-account leakage01 · RetrievalSEV-1
CS-01Unauthorised commitment02 · DraftingSEV-1
CS-06Recap rewrites the meeting02 · DraftingSEV-2
CS-02Change order never raised03 · Review / sendSEV-1
CS-05Approval never given04 · RecordSEV-1
CS-07Superseded scope source05 · Change / VersionSEV-3

F · Creative-versioning & asset-production agents

CV-01Version outside the licence01 · Master & rightsSEV-1
CV-02Talent in an excluded market01 · Master & rightsSEV-1
CV-03Disclosure lost in the crop02 · CompositionSEV-1
CV-04Template rules broken02 · CompositionSEV-3
CV-05Offer localised wrong03 · LocalisationSEV-2
CV-06Product shown wrong04 · OutputSEV-2
CV-07Stale master propagated05 · Change / VersionSEV-2

G · Brand-safety & suitability agents

BS-01Policy version applied late01 · Policy & listsSEV-2
BS-02Journalism blocked on a keyword02 · ClassificationSEV-2
BS-03Identity vocabulary read as risk02 · ClassificationSEV-2
BS-04Adjacency the brand cared about03 · Filter / writeSEV-1
BS-05Made-for-advertising cleared03 · Filter / writeSEV-3
BS-06Unread inventory reported clear04 · ReportingSEV-1
BS-07Vendor taxonomy shifts unseen05 · Change / VersionSEV-2

H · Ad-verification & fraud-triage agents

AV-01Artefact called fraud01 · Signal intakeSEV-1
AV-02Legitimate publisher blocked02 · ClassificationSEV-1
AV-03Authorised but misrepresented02 · ClassificationSEV-2
AV-04Confirmed after the window03 · Evidence & claimSEV-2
AV-05Evidence the counterparty rejects03 · Evidence & claimSEV-2
AV-06Pennies chased, waste untouched04 · Block / outputSEV-3
AV-07Vendor definition moved05 · Change / VersionSEV-3

I · Campaign-trafficking & QA agents

CT-01Wrong creative in a market01 · Plan readSEV-1
CT-02Flight set in the wrong zone02 · BuildSEV-2
CT-03Tracker on the wrong placement03 · TrackingSEV-1
CT-04Conversion counted twice03 · TrackingSEV-1
CT-05Checked the tag, not the page04 · Pre-launch checkSEV-1
CT-06Held on a check that was wrong04 · Pre-launch checkSEV-3
CT-07Convention broken by a change05 · Change / VersionSEV-2

J · Spend-pacing & anomaly-triage agents

SP-01Real overspend seen too late01 · Data pullSEV-1
SP-02Planned peak paged as a break02 · DetectionSEV-3
SP-03Alert fatigue in the channel02 · DetectionSEV-2
SP-04Raised on unsettled data03 · ClassificationSEV-3
SP-05Alert with nothing to act on04 · EscalationSEV-2
SP-06Nobody on the rota at 2am04 · EscalationSEV-1
SP-07Threshold left behind by the budget05 · Change / VersionSEV-1

K · Influencer-outreach & negotiation agents

IO-01Bought audience taken as real01 · SourcingSEV-2
IO-02Back-catalogue risk missed02 · VettingSEV-2
IO-03Offer the brand cannot honour03 · Outreach & termsSEV-1
IO-04Outreach volume burns the roster03 · Outreach & termsSEV-3
IO-05Contract contradicts the thread04 · Contract & postSEV-1
IO-06Disclosure never verified04 · Contract & postSEV-1
IO-07Stale licence window on file05 · Change / VersionSEV-1

L · Retail-media campaign copilots

RM-01Catalogue change unseen01 · Network readSEV-3
RM-02Wrong taxonomy map01 · Network readSEV-2
RM-03Cannibalised organic02 · Bid & targetSEV-2
RM-04Margin ignored in bids02 · Bid & targetSEV-1
RM-05Unbuyable line spends03 · Network writeSEV-1
RM-06Same sale counted twice04 · ReconciliationSEV-2
RM-07Network changes its rules05 · Change / VersionSEV-2

M · Publisher-yield & supply-chain integrity agents

SY-03Cached file snapshot01 · RetrievalSEV-3
SY-04Cross-taxonomy MFA claim02 · ReasoningSEV-1
SY-06Payment path read as full trail02 · ReasoningSEV-1
SY-02Parse failure misread03 · Tool / writeSEV-1
SY-05First-price model, hybrid path03 · Tool / writeSEV-2
SY-01Trade-off omitted04 · OutputSEV-2
SY-07Silent taxonomy drift05 · Change / VersionSEV-2

N · Supply-path optimisation & curation agents

SO-03Stale path snapshot01 · RetrievalSEV-3
SO-04Blended MFA average cited02 · ReasoningSEV-1
SO-06Schain read as full custody02 · ReasoningSEV-1
SO-02Uniform log-level assumed03 · Tool / writeSEV-1
SO-05Saving reported as realised03 · Tool / writeSEV-2
SO-01Reach impact omitted04 · OutputSEV-2
SO-07Silent fee-model drift05 · Change / VersionSEV-2

O · Marketing-mix & incrementality agents

MM-03Stale series pull01 · RetrievalSEV-3
MM-04Prior source blurred02 · ReasoningSEV-1
MM-06Mismatched calibration basis02 · ReasoningSEV-1
MM-02Low-confidence release03 · Tool / writeSEV-1
MM-05Modelled return shown as real03 · Tool / writeSEV-2
MM-01Interval dropped04 · OutputSEV-2
MM-07Silent specification drift05 · Change / VersionSEV-2

P · Regulated-claims & AI-disclosure agents

DZ-03Superseded rule set01 · RetrievalSEV-3
DZ-04Human-review exemption misapplied02 · ReasoningSEV-1
DZ-06Single-market rule generalised02 · ReasoningSEV-1
DZ-02Non-existent rule cited03 · Tool / writeSEV-1
DZ-05Evidence backfilled03 · Tool / writeSEV-2
DZ-01Market split omitted04 · OutputSEV-2
DZ-07Silent rule-set drift05 · Change / VersionSEV-2

Q · Agentic-commerce readiness agents

GC-03Stale cohort snapshot01 · RetrievalSEV-3
GC-04Cross-standard claim02 · ReasoningSEV-1
GC-06Signature read as intent02 · ReasoningSEV-1
GC-02Malformed signature misread03 · Tool / writeSEV-1
GC-05Split-version rule applied03 · Tool / writeSEV-2
GC-01Standard status omitted04 · OutputSEV-2
GC-07Silent admission drift05 · Change / VersionSEV-2

R · CTV fraud & measurement agents

TV-03Stale SSAI whitelist range01 · RetrievalSEV-3
TV-04Proxy value read as signal02 · ReasoningSEV-1
TV-06Whitelist bypass unflagged02 · ReasoningSEV-1
TV-02Low-confidence auto-escalation03 · Tool / writeSEV-1
TV-05Duplicate case opened03 · Tool / writeSEV-2
TV-01Named seller omitted04 · OutputSEV-2
TV-07Silent detection drift05 · Change / VersionSEV-2

S · Retail-media network operations agents

NO-03Off-site inventory list stale01 · RetrievalSEV-3
NO-04Clean-room output misread02 · ReasoningSEV-1
NO-06Self-preferencing unflagged02 · ReasoningSEV-1
NO-02Low-confidence auto-release03 · Tool / writeSEV-1
NO-05Duplicate catalogue onboarded03 · Tool / writeSEV-2
NO-01Disclosure label omitted04 · OutputSEV-2
NO-07Silent attribution-window drift05 · Change / VersionSEV-2

T · Attention-measurement agents

TN-03Stale accreditation status01 · RetrievalSEV-3
TN-04Cross-method averaging02 · ReasoningSEV-1
TN-06Accreditation overstated02 · ReasoningSEV-1
TN-02Auto-shift on attention alone03 · Tool / writeSEV-1
TN-05Attention shown as an outcome03 · Tool / writeSEV-2
TN-01Method attribution dropped04 · OutputSEV-2
TN-07Silent panel drift05 · Change / VersionSEV-2

Guardrails

Critical guardrails for Advertising & Marketing agents

Ten controls that hold regardless of prompt, plan or pressure. Open one to see what it protects, what trips it, what the agent is forced to do, who may release it, and what is written to the record.

GR-01No campaign launch or spend change without funded-budget approvalOverride defined
  1. Target

    All ad-platform spend endpoints, campaign launch actions and budget or bid changes across managed accounts

  2. Trigger

    Agent attempts go-live or a budget or bid change exceeding the approved daily cap

  3. Action — enforced

    Hold the launch and freeze the spend change; agent may draft the plan and request sign-off

  4. Human override

    Released only by the account lead via dual-control approval in the campaign console

Logged evidencecampaign id · requested vs approved budget · approver identity · timestamp · console approval ref

GR-02No performance or product claim without substantiation on fileOverride defined
  1. Target

    Generated ad copy, landing pages, performance reports and any outbound claim in owned or paid channels

  2. Trigger

    Copy asserts a performance, pricing or product claim with no matching substantiation record

  3. Action — enforced

    Block publication and strip the claim; agent may return a substantiated variant or flag for review

  4. Human override

    Released only by the compliance reviewer after attaching a substantiation reference to the claim

Logged evidenceclaim text · substantiation doc id · reviewer identity · decision · timestamp

GR-03No housing, jobs or credit ad using protected-attribute targetingOverride defined
  1. Target

    Audience and targeting configuration for housing, employment and credit campaigns across all ad platforms

  2. Trigger

    Targeting for a special-category ad references or proxies a protected attribute or excluded audience

  3. Action — enforced

    Deny the configuration and enforce the compliant special-ad audience; agent may proceed with cleared parameters

  4. Human override

    Released only by the compliance reviewer confirming a lawful special-category audience configuration

Logged evidencecampaign category · targeting parameters · blocked attributes · reviewer identity · timestamp

GR-04No cross-client retrieval across competing accountsNo override
  1. Target

    Retrieval, memory, asset libraries and reporting scoped to a single client tenant boundary

  2. Trigger

    A request or tool call would read another client tenant data, assets or performance

  3. Action — enforced

    Deny the cross-tenant read and return only in-scope data; agent continues within the client boundary

  4. Human override

    None — cannot be overridden in session

Logged evidencerequesting tenant · target tenant · denied resource id · policy rule · timestamp

GR-05No instruction embedded in briefs, web or UGC ever executedNo override
  1. Target

    Ingested briefs, scraped web pages, user-generated content and any third-party text the agent reads

  2. Trigger

    Ingested content contains directives, tool calls or links attempting to steer the agent

  3. Action — enforced

    Treat the content as data only, refuse the embedded instruction and strip active links; analysis continues

  4. Human override

    None — cannot be overridden in session

Logged evidencesource artifact id · detected instruction · stripped links · content hash · timestamp

GR-06No non-consented audience upload to ad platformsOverride defined
  1. Target

    Customer-match uploads, pixel and server-side tag payloads sent to advertising platforms

  2. Trigger

    An audience upload or tag payload lacks a recorded lawful consent basis

  3. Action — enforced

    Block the upload and suppress non-consented records; agent may proceed with the consented segment only

  4. Human override

    Released only by the data-protection officer after verifying consent provenance for the segment

Logged evidencesegment id · consent basis · suppressed record count · approver identity · timestamp

GR-07No child-directed targeting without verified parental consentOverride defined
  1. Target

    Targeting, retargeting and third-party data sharing for audiences that may include children

  2. Trigger

    Campaign targets or infers a child-directed audience without verifiable parental consent on record

  3. Action — enforced

    Deny targeting and disable data sharing; agent may run only contextual, non-personalised placements instead

  4. Human override

    Released only by the compliance reviewer after verifiable parental consent is confirmed on file

Logged evidenceaudience id · age-signal source · consent record ref · reviewer identity · timestamp

GR-08No synthetic likeness without cleared likeness rightsOverride defined
  1. Target

    Generated creative depicting a real person face, voice or likeness in any campaign asset

  2. Trigger

    Asset renders an identifiable person or voice without a rights or release record

  3. Action — enforced

    Block the asset and quarantine the render; agent may proceed with a licensed or fictional likeness

  4. Human override

    Released only by the legal reviewer after attaching a signed likeness release or licence

Logged evidenceasset id · depicted identity · rights record ref · reviewer identity · timestamp

GR-09No AI-voice outreach without consent or after opt-outOverride defined
  1. Target

    Outbound AI-voice calls, autodialed texts and email campaigns to consumer contact lists

  2. Trigger

    Recipient lacks prior express consent or appears on a suppression or opt-out list

  3. Action — enforced

    Block the send and honour the suppression list; agent may contact only consented, non-suppressed recipients

  4. Human override

    Released only by the compliance reviewer after verifying consent records and suppression scrubbing

Logged evidencerecipient id · consent record · suppression check result · channel · timestamp

GR-10No over-scoped account action beyond granted mandateOverride defined
  1. Target

    Connected ad-platform, CMS and social-account tools and the scopes granted to the agent

  2. Trigger

    A tool call requests an action or scope beyond the mandate for this workflow

  3. Action — enforced

    Deny the out-of-scope call and require step-up approval; agent continues within its granted permissions

  4. Human override

    Released only by the account administrator via a scoped, time-boxed permission grant

Logged evidencetool id · requested scope · granted scope · decision · approver identity · timestamp

Oversight

Human review — triggers, decisions and evidence

When a defined risk trigger fires, the affected action is routed to a named reviewer. Every decision is recorded with its correction, escalation and final outcome for full traceability.

  • ConfidenceLow-confidence claim check
  • Financial impactCampaign budget change
  • Identity / change riskNew audience-list upload
  • Irreversible actionCampaign launch or send
  • Policy riskRestricted-category ad
  • Safety controlGuardrail override
  • Quality failureFailed critical evaluation
Humanreviewnamed reviewer
  • Revieweridentity + role
  • Decisionapprove / reject / amend
  • Correctionwhat changed
  • Escalationwho, why and severity
  • Final outcomereleased / blocked / returned for rework

7 triggers · any one halts the agent

1 record · 5 fields, every time

Compliance

Regulatory mapping

  • 01 Goal
  • 02 Retrieval
  • 03 Workflow
  • 04 Task
  • 05 Tool
  • 06 LLM
  • 07 Evaluation
  • 08 Guardrail
  • 09 Human review
  • 10 Outcome

Claim substantiation

Evidence must exist before a claim runs. Every regenerated version is a new claim needing its own file; evidence assembled afterwards is not substantiation.

FTC Substantiation Policy Statement (1984) · CAP Code rule 3.7 · BCAP Code rule 3.9

Lifecycle layer:02 Retrieval · 06 LLM · 07 Evaluation · 10 Outcome

  • ADV-01
  • CG-01
  • CG-02
  • CG-03
  • CG-07
  • DZ-02
  • DZ-05

Evaluations

Baseline evaluation suite — in detail

Baseline evaluations are completed during onboarding and repeated based on the selected plan. Agents that fail critical checks remain restricted until they pass re-testing.

Evaluation suites
66
Failure modes covered
186 of 186
Cases · 10% rotated / quarter
4,250
Audit-ready scorecard
Monthly

Output evaluation7 suites · 420 cases

60 casesAttribution-analysis setcatches ADV-14
60 casesRegression canary setcatches ADV-23
60 casesLocalization-quality setcatches ADV-39
50 casesAccessibility-guard setcatches ADV-42
50 casesAnswer-engine-monitoring setcatches ADV-46
70 casesSettled figures and honest commentary setcatches PR-01–07
70 casesEvidenced determination setcatches AV-01–07

Use your work email to unlock the full grid. We use it to send the requested Agent Care material and qualify business inquiries. We do not sell or share your email.

  1. Domain-expert review

    Client-designated subject-matter experts review evaluation criteria, pass thresholds and industry-specific risks before baseline approval.

  2. Test-case rotation

    Evaluation cases are refreshed regularly to reduce memorisation, limit overfitting and maintain meaningful performance measurement.

  3. Scorecard integration

    Scorecards compare results with the approved baseline, show performance trends and flag material declines for review and escalation.

  4. Client-specific extensions

    Where included in scope, evaluations may be expanded using approved incidents, workflows, policies, data patterns and industry-specific risks.

Monitoring

Change-aware monitoring

When agent performance changes, Nestack correlates the shift with changes to the agent, prompt, model, tools, knowledge base, guardrails and evaluation suite.

Version changes by layer
01AgentAgent changed in week 3
02PromptPrompt changed in week 5Prompt changed in week 10
03ModelModel changed in week 8Model changed in week 10
04ToolTool changed in week 4
05Knowledge-baseKnowledge-base changed in week 6Knowledge-base changed in week 12
06GuardrailGuardrail changed in week 10
07Eval-suiteEval-suite changed in week 3
Claim-substantiation rate92–100%
  • Week 1 · 97.9%
  • Week 2 · 97.8%
  • Week 3 · 98.0%
  • Week 4 · 97.9%
  • Week 5 · 98.1%
  • Week 6 · 97.9%
  • Week 7 · 98.0%
  • Week 8 · 94.3%
  • Week 9 · 94.1%
  • Week 10 · 97.9%
  • Week 11 · 98.0%
  • Week 12 · 98.1%

Week readouthover or select

Week 8of 12

  • 03Modelopus 4.6 · 0612

94.3%Claim-substantiation rate

  • 7 layers stamped on every run · 12-week window
  • Catches ADV-23 · silent model-version regression

Something missing?

Don’t see your agent’s issue here?

Every AI environment is different. Share what you’re seeing, and we’ll review the behaviour, assess the risk and recommend the evaluations or controls that may help.

Report an agent issue

Tell us what you’re seeing

The more specific, the faster we can reproduce it. Playbook: Advertising & Marketing

We reply within one business day.

See pricing

No commitment. Even if you never become a client, we’ll tell you what we think is happening.

Process

Universal incident runbook

Severity is assigned based on business impact, customer harm, data exposure, operational disruption and overall scope.

  • SEV-1 Critical
  • SEV-2 Major
  • SEV-3 Moderate
  • SEV-4 Minor
STEP 01

Automated monitoring or human review identifies unusual behaviour. Alerts are recorded and routed according to severity.

Outcomes

Not just that it ran.
What it delivered.

Observability shows the agent ran. It can’t show the campaign launched or what the work cost. Where outcome data exists, we trace each result to its session — and a named reviewer signs off the month.

Issued
Monthly, per engagement
Traced
Every figure to its session
Signed
By your engagement reviewer
Used for
Client reporting, partner review, the AgentOps scorecard

Nestack AgentOps

Advertising fleet · monthly statement

  • Creative approved and shipped3,140
  • Placement verified brand-safe12,480
  • Performance report published214
  • Audience list validated486
  • Campaign launches completed18 of 18
  • Workflows delivered16,320
  • Outcome success rate98.2%
  • Human correction required294 · 1.8%
Average AI cost per successful workflow$0.34

Every figure linked to its source trace · exportable for review and audit support

Cost control

Keep advertising & marketing AI agent costs under control

Token spend is monitored, optimised and reported as part of Agent Care — and savings never come at the expense of quality, because every change is verified against your evaluation baseline.

We review token spend by agent, workflow, model, and session so you can understand where AI costs are coming from.

Running advertising & marketing AI agents in production?

Get a free assessment of one agent. We’ll review its behaviour, run a baseline evaluation and highlight potential risks and performance gaps.

Loading open times…

Open times

Select an available date above to view open 45-minute times from our calendar.